A local privilege escalation vulnerability in TeamSpeak 3.5.6 allows authenticated local users to execute arbitrary code with elevated system privileges.

This vulnerability involves incorrect permission assignment for critical resources (CWE-732), where the installation directory allows local users to modify or replace binary files. An attacker with local access can replace legitimate application executables with malicious binaries, which will subsequently run with high privileges.

Successful exploitation of this vulnerability allows a local attacker to achieve full system compromise by escalating privileges to SYSTEM or Administrator. This poses a significant risk to the confidentiality, integrity, and availability of the affected workstation, as the attacker can perform unauthorized actions, install persistent backdoors, or exfiltrate sensitive data. Given the CVSS score of 8.4, this is a high-severity issue that requires immediate attention to prevent local privilege escalation.

Immediate Action: Update the TeamSpeak 3 Client to the latest version provided by the vendor to remediate the insecure file permissions.

Proactive Monitoring: Review system access logs for signs of unauthorized file modifications within the TeamSpeak installation directory or unexpected process execution.

Compensating Controls: Ensure that local users on the affected Windows systems are restricted from modifying files in application installation directories through Group Policy or other access control mechanisms.

Public Exploit Available: Yes, a proof-of-concept exists as detailed in the Exploit-DB entry 50743.

Organizations should prioritize updating all instances of the TeamSpeak 3 Client to the latest version to eliminate this local privilege escalation vector. Given that a functional proof-of-concept is publicly available, the window for remediation is limited, and failure to patch could allow local actors to gain full administrative control over compromised systems.